IP spoofing

Someone is spoofing the IP address of trusted commenters to leave nasty comments on our blog. How is this done? How is the troublemaker able to read the IP address associated with comments? And how can we stop it?